A due diligence process that occurs at a service provider’s location(s). Historically, onsite assessments have tended to yield the highest degree of assurance, but their utility is limited by the point in time nature of these assessments. Some outsourcers are adopting continuous monitoring techniques in order to have near real-time insight into third party security concerns.
